Inside a telecom security assessment: methods and tooling for mobile networks
15
1:00 PM - 2:00 PM
Security assessments on mobile networks are not generic IT penetration tests. The protocols, the interfaces and the failure modes are specific to telecom, and so are the methods and the tooling needed to test them properly.
In this session, Martin Kacer walks through how a telecom security assessment is actually run: how AI has compressed attack and defence timelines, how to model risk across a telecom estate, how an assessment is scoped and executed, and which tools measure what a questionnaire cannot.
Key topics include:
- How AI changed the speed of attack and defence, and what it means for telecom
- A risk model for prioritising across IT, core, RAN and OT
- How an assessment is scoped by access level, run phase by phase, and re-tested
- Why signalling risk goes unmeasured, and the TelcoSec Arsenal tools that measure it
Speaker
Martin Kacer
Telecom security expert
Martin Kacer is a telecom security expert at P1 Security. He performs pentests, security audits, consulting and training in the telecom domain. He has contributed to GSMA security guidelines for mobile networks, including FS.11, FS.19, FS.20 and FS.36. He co-authored the open-source SS7 and Diameter Signalling Firewall, presented at Black Hat USA 2017, and has designed intrusion detection systems, signalling vulnerability scanners, signalling threat intelligence and other telecom security tools.
Replays
See all
15
1:00 PM - 2:00 PM